D-Link DXS-1210-16TC - Appendix C - RADIUS Attributes Assignment

DXS-1210 Series Smart Managed Switch CLI Reference Guide
388
Appendix C - RADIUS Attributes Assignment
The RADIUS Attributes Assignment on the DXS-1210 is used in the following modules: Console,
Telnet, SSH, Web, 802.1X, MAC-based Access Control, JWAC, and WAC.
The description that follows explains the following RADIUS Attributes Assignment types:
• Ingress/Egress Bandwidth
• 802.1p Default Priority
• VLAN
To assign the Ingress/Egress Bandwidth by the RADIUS server, the proper parameters should be
configured on the RADIUS Server. The table below shows the parameters for bandwidth.
The parameters of the Vendor-Specific attributes are:
Vendor-Specific Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 2 (for ingress bandwidth)
3 (for egress bandwidth)
Required
Attribute-Specific Field Used to assign the
bandwidth of a port.
Unit (Kbits) Required
If the user has configured the bandwidth attribute of the RADIUS server (for example, ingress
bandwidth 1000Kbps), and 802.1X authentication is successful, the device will assign the bandwidth
(according to the RADIUS server) to the port. However, if the user does not configure the bandwidth
attribute and authenticates successfully, the device will not assign any bandwidth to the port. If the
bandwidth attribute is configured on the RADIUS server with a value of “0”, the effective bandwidth
will be set “no_limited”, and if the bandwidth is configured less than “0” or greater than maximum
supported value, the bandwidth will be ignored.
To assign the 802.1p Default Priority by the RADIUS server, the proper parameters should be
configured on the RADIUS server. The table below shows the parameters for 802.1p default priority.
The parameters of the Vendor-Specific attributes are:
Vendor-Specific Attribute Description Value Usage
Vendor-ID Defines the vendor. 171 (DLINK) Required
Vendor-Type Defines the attribute. 4 Required
Attribute-Specific Field Used to assign the 802.1p
default priority of the port.
0 to 7 Required
If the user has configured the 802.1p priority attribute of the RADIUS server (for example, priority 7)
and 802.1X authentication is successful, the device will assign the 802.1p default priority (according
to the RADIUS server) to the port. However, if the user does not configure the priority attribute and
authenticates successfully, the device will not assign a priority to this port. If the priority attribute is
configured on the RADIUS server is a value out of range (>7), it will not be set to the device.